Langflow-ai vulnerabilities
42 CVEs and advisories name Langflow-ai as an affected vendor, 3 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-55255Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow
- CVE-2026-33017Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint
- CVE-2025-3248Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code